
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
File: CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json)
Hash identifier: 0tZzfyUeX9XILfipLOXBeZvvyQ8DuH3TTJXBBxNWsMk=
Subject key identifier: 8C:DA:C9:ED:51:12:52:5F:D3:4E:26:C2:00:0B:2D:9C:B9:37:2B:34
Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
Certificate issuer: /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
Manifest number: 13
Signing time: Fri 17 Apr 2026 08:43:47 +0000
Manifest this update: Fri 17 Apr 2026 08:43:47 +0000
Manifest next update: Fri 24 Apr 2026 08:43:47 +0000
Files and hashes: 1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: s0iAEJJf2Z1oblxN05UUwxrlc+OWsONmbsAiEmZLhY4=)
2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 6zoeGcCtP6FTiaINUWBwyZ7nVaRrhDbGgSD5PdYUKXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Validity
Not Before: Apr 17 08:43:47 2026 GMT
Not After : Apr 24 08:43:47 2026 GMT
Subject: CN=69e1f2c3-1db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:e6:07:65:1f:e6:f3:92:11:b2:c0:d6:65:
cc:9b:61:e5:0f:db:61:5b:04:36:aa:72:66:d2:a2:
f6:91:1f:2b:bc:a6:a1:b8:fe:5f:ab:16:77:54:de:
a7:03:cb:86:1a:5b:08:b4:13:88:2f:97:37:2a:c0:
1d:07:1e:ad:8c:24:99:3b:39:72:29:97:2b:8e:9c:
22:09:c3:1e:72:4a:62:ae:0c:06:b4:b0:d0:91:24:
64:ee:68:eb:9a:bc:1d:89:74:ef:7d:5c:c0:d2:eb:
51:3b:98:eb:bf:4d:80:a5:53:90:18:f5:7c:a4:77:
83:03:1d:0a:f2:46:03:a8:f3:76:0e:91:63:2c:68:
6d:83:d3:bd:16:49:10:11:b5:30:0a:5b:f0:4c:ae:
09:b2:b2:3e:09:31:96:9b:09:a1:f1:95:96:b3:78:
b2:d9:22:1c:82:2d:39:a1:6a:e0:1b:8a:44:99:e7:
33:f8:c0:70:5f:25:71:9c:6b:a1:0b:0c:5f:d7:a3:
5e:38:fe:10:27:f5:7c:99:3d:37:8b:7a:65:6f:ed:
66:ad:b8:42:02:29:cd:ad:66:ad:d2:ff:42:2e:b4:
ce:76:bd:c9:96:df:0c:a9:bb:2f:4a:59:db:d5:9c:
c0:89:eb:33:c0:56:d6:8f:59:2f:fb:f5:ac:17:cd:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:C9:ED:51:12:52:5F:D3:4E:26:C2:00:0B:2D:9C:B9:37:2B:34
X509v3 Authority Key Identifier:
keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:da:a5:4d:22:4c:7d:e3:4f:06:76:4b:04:34:8a:73:d2:
09:79:f9:4c:53:69:0e:03:64:2a:f9:16:0f:e6:96:97:95:35:
26:9d:36:f8:a8:98:8e:cf:c9:72:39:55:33:7e:81:bd:c7:8e:
58:16:d3:16:6d:5e:ea:a7:43:68:18:9f:a7:5e:69:d3:ae:00:
58:75:51:a5:20:ad:ea:a6:79:d0:38:ce:3d:04:69:4d:90:09:
60:a5:b0:0a:70:4d:3d:ca:68:69:32:c2:4e:e4:2c:44:13:7e:
36:da:5b:31:c4:e6:75:e0:95:19:fd:14:3d:43:98:c1:bd:aa:
bd:ae:46:42:7b:b6:9e:e3:ad:8c:f9:13:03:f8:05:55:5b:04:
10:4b:19:9f:95:e0:54:9f:40:73:f1:cb:79:11:e7:b1:d9:4d:
78:74:06:31:a5:6e:79:9a:cc:00:ec:c8:0c:5c:36:2c:e1:de:
a9:ef:dc:88:02:cb:14:dd:b2:ff:3f:6d:d4:3b:d7:de:3e:5f:
3d:e0:6d:74:91:40:17:76:cc:21:e3:9c:fd:d4:dc:05:54:0a:
8e:25:a0:a0:6a:f7:c3:18:71:22:75:89:c9:21:a3:52:47:91:
ac:68:ab:9f:88:e3:e5:ff:04:e6:de:6a:13:18:d8:1c:ac:77:
8f:a2:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:39 2026 by rpki-client